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DETAILED ACTION 

1 . Claims 1 -20 have been examined. 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

3. Claims 1-5 and 7-19 are rejected under 35 U.S.C. 102(e) as being anticipated by Gilchrist 
U.S. Pat. No. 6950949 (hereinafter Gilchrist). 

4. As per claim 1, Gilchrist discloses a method performed by a client comprising: receiving 
a password challenge from a server (Gilchrist: column 2 lines 22-34); and displaying a prompt 
asking a user for a password (Gilchrist: column 2 lines 39-40), the prompt including an 
authentication graphic visible to the user (Gilchrist: column 2 lines 22-35). 

5. As per claim 2, Gilchrist discloses the method of claim 1 . Gilchrist further discloses 
wherein displaying the prompt comprises calling a secure password prompt routine having 
access to a secure storage (Gilchrist: column 3 lines 31-46). 
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6. As per claim 3, Gilchrist discloses the method of claim 2. Gilchrist further discloses 
wherein displaying the prompt further comprises retrieving a stored secret from the secure 
storage and generating the authentication graphic using the retrieved secret (Gilchrist: column 4 
lines 50-62). 

7. As per claim 4, Gilchrist discloses the method of claim 1 . Gilchrist further discloses 
wherein the user can verify the authenticity of the prompt by comparing the authentication 
graphic to a known graphic (Gilchrist: column 4 lines 31-35). 

8. As per claim 5, Gilchrist discloses the method of claim 4. Gilchrist further discloses 
wherein the known graphic is physically attached to the client (Gilchrist: column 3 lines 31-47). 

9. As per claim 7, Gilchrist discloses the method of claim 3. Gilchrist further discloses 
wherein the secret becomes stored in the secure storage when first entered by the user (Gilchrist: 
column 5 lines 15-19). 

10. As per claim 8, Gilchrist discloses the method of claim 3. Gilchrist further discloses 
wherein the secret becomes stored in the secure storage when generated based upon information 
entered by the user (Gilchrist: column 5 lines 15-19). 
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11. As per claim 9- 1 9, claims 9- 1 9 encompass the same scope as claims 1 -5 and 7-8. 
Therefore, claims 9-19 are rejected based on the same reason set forth above in rejecting claims 
1-5 and 7-8. 

Claim Rejections - 35 USC § 103 

12. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

13. Claims 6 and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable over Gilchrist 
in view of Kobata et al. U.S. Pub. No. 20060005237 (hereinafter Kobata). 

14. As per claim 6 and 20, Gilchrist discloses the method of claims 1 and 15 respectively. 
Gilchrist does not explicitly disclose receiving the password from the user; generating a digest 
using the received password and password challenge; and sending the digest to the server. 
However, Kobata discloses generating message digest on password and transmit to server for 
authentication (Kobata: [0041]). It would have been obvious to one having ordinary skill in the 
art to generate a message digest on password because they are analogous art. Therefore, it would 
have been obvious to one having ordinary skill in the art to combine the teachings of Kobata 
within the system of Gilchrist because generating message digest on password is well known in 
the art for secure communication between client and server. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Shin-Hon Chen whose telephone number is (571) 272-3789. The 
examiner can normally be reached on Monday through Friday 8:30am to 5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Shin-Hon Chen 
Examiner 
Art Unit 2131 
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